Privacy notice

Just A Little IT, providing the service under the provisional working name Wrencharoo, is the data controller responsible for deciding how personal information is used to provide this service. Contact Just A Little IT at Email Just A Little IT for privacy questions, access requests or complaints. Paddle separately handles personal information for its Merchant of Record services under its own Privacy Notice.

• Account and sign-in information: name, email address, account identifiers, authentication credentials and connected sign-in provider information are used to create and authenticate accounts, recover access, save preferences and communicate about your account. We do not receive your external sign-in provider’s password.
• Vehicle and tracking information: vehicle details and registration, odometer readings, fuel/service/parts history, specifications, notes, trip and business-use records, lease information and imported files are used to provide your logbook, reports and calculations. These records may contain personal information.
• Optional location: GPS coordinates you choose to attach to a fill-up are used to record where it happened. Location is requested only when you choose that option; you can refuse permission or remove it before saving.
• Optional AI inputs: submitted photos and receipts, prompts, dictated or typed text, selected vehicle history and import headings/sample rows are used to recognise details, suggest mappings and analyse records. Only use these tools with content you have permission to share and review suggestions before saving.
• Subscription, Family and usage information: plan details, Paddle customer/transaction/subscription identifiers, billing status and dates, Family memberships and invitations, AI usage and allowance records are used to manage access, renewals, invitations and usage limits. Family membership does not give members access to each other’s vehicle records.
• Support and operational information: support messages, device/browser information, IP addresses and technical/error or security logs may be processed when you contact us or use the service, to answer requests, diagnose problems and prevent fraud or abuse.

Where applicable data-protection law requires a legal basis, account, logbook and subscription processing is necessary to perform our contract with you; security, troubleshooting and service improvement rely on legitimate interests balanced against your rights; optional permissions and any consent-based communications rely on your consent; and records needed for tax, accounting or lawful requests rely on legal obligations. You can withdraw consent for optional processing without affecting the lawfulness of earlier processing.

• Service providers: Lovable Cloud and its infrastructure providers supply hosting, account authentication, data storage and operational tooling. Support and email providers process information needed to deliver their services.
• AI providers: optional AI requests are sent through the Lovable AI gateway to its model provider to process the submitted content. Provider logging and retention are subject to their applicable terms; this notice does not promise that inputs are never logged or retained. Avoid submitting sensitive information that is not needed.
• Speech recognition: voice dictation uses your browser/platform’s speech-recognition service. Depending on the browser, audio may be processed by that provider rather than solely on your device. The resulting text may be submitted to our AI service when you request interpretation.
• Paddle: Paddle.com, our Merchant of Record, receives information needed for selling the product, payment processing, subscription management, tax compliance and invoicing. Payment details you enter at Paddle checkout are handled by Paddle and its payment providers; Wrencharoo does not store your full card details.
• Other recipients: professional legal/accounting advisers where needed, authorities where required by law, and parties you authorise to receive your information.

We do not sell your personal information. Providers may process information in countries outside Australia. Where international-transfer safeguards are required by applicable law, we use appropriate safeguards such as contractual protections, standard contractual clauses or recognised adequacy mechanisms.

Your account and saved tracking records are kept while your account is active so the logbook remains available. You can delete individual records or request account deletion in Account settings. Deletion stops future billing and removes tracking records and your identity through a deletion process; if an interruption occurs, the app provides a retry path.

We retain billing, transaction, security, support and legal records only as long as needed for their purpose or applicable legal obligations. Backups and service-provider logs may remain until their retention cycles expire. Data is deleted or anonymised when no longer needed; deleting an account does not guarantee immediate removal of every backup or independent Paddle record.

Contact us for the retention information applicable to a particular record or request. See the Terms and Refund Policy for the effect of account deletion on billing.

We use appropriate technical and organisational safeguards, including encrypted connections, authenticated access, owner-scoped access controls and protected server-side credentials. We restrict access to information needed to operate the service. No system can guarantee absolute security; keep your sign-in credentials private and contact us if you suspect unauthorised access.

Wrencharoo uses essential browser storage to maintain your signed-in session, preferences and sign-in destination. Paddle checkout and hosting or sign-in services may use essential cookies or similar technologies for payments, authentication and security. This notice does not claim that third-party services are cookie-free.

No optional analytics or marketing cookie feature is currently configured in the app. If we introduce one that requires consent, we will request that consent before using it. You can manage cookies, site storage, microphone and location permissions in your browser settings; blocking or clearing essential storage may sign you out or prevent checkout from working. Paddle manages its own cookie information and preferences under its privacy notice.

You can request access to or correction of personal information, ask for deletion and raise a complaint by contacting Email Just A Little IT. Where applicable law provides them, you can also request restriction or portability, object to processing and withdraw consent. We may need to verify your identity and may retain information where law requires it.

For UK/EEA users where GDPR applies, these rights include access, rectification, erasure, restriction, portability, objection and withdrawal of consent. We normally respond within one month, subject to permitted extensions. You may complain to your local supervisory authority. Australian users can raise unresolved privacy concerns with the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this notice as the service changes and will publish the revised effective date. Contact Just A Little IT for clarification about any part of this notice.